Some questions about Traefik

Hello!

I want to migrate from Nginx Proxy Manager to Traefik, but I have some questions and concerns.

Firstly, I want to avoid lateral movement between containers if not strictly necessary, so I don't want all of them on one network, but I also don't want to create a separate network for every service, because that's inefficient and repetitive and defeats the purpose of me switching to Traefik. Can I somehow make it so that containers can only communicate with Traefik on a given network?

Secondly, I have a second server running Docker, and I want to be able to use it with Docker labels too. I don't want to use Kubernetes/Swarm, and I have a general distrust of community-maintained tools like traefik-kop.

Can I add a second Docker provider in traefik.yaml? If so, should I go with TCP, HTTP(S) or SSH?